The vulnerability of the central control server of SiNVR 3 Central Control Server (CCS) arises from an incorrect path name limitation in the web interface download section, which allows a hacker to gain access to the server’s file system, enabling them to download files from the server and copy files from the server.

Incorrect path name limitation in the central control server web download lets attackers access restricted directories and copy files.

Reporter	Title	Published	Views	Family All 10
CNVD	Siemens SiNVR 3 Path Traversal Vulnerability	12 Mar 202000:00	–	cnvd
CVE	CVE-2019-19290	10 Mar 202019:16	–	cve
Cvelist	CVE-2019-19290	10 Mar 202019:16	–	cvelist
EUVD	EUVD-2019-8914	7 Oct 202500:30	–	euvd
ICS	ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B)	13 Apr 202100:00	–	ics
ICS	Siemens and PKE Control Center Server	13 Apr 202100:00	–	ics
NVD	CVE-2019-19290	10 Mar 202020:15	–	nvd
Prion	Path traversal	10 Mar 202020:15	–	prion
Positive Technologies	PT-2020-2442 · Sinvr · Sinvr 3 Central Control Server +1	10 Mar 202000:00	–	ptsecurity
RedhatCVE	CVE-2019-19290	22 May 202504:54	–	redhatcve